Re: [Bacula-users] need help (step by step) for setting up certificates
2011-07-24 12:34:01
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Ben Walton @ 07/24/2011 05:22 AM:
> Excerpts from scar's message of Sun Jul 24 00:12:30 -0400 2011:
>
>> so i tried adding `TLS Allowed CN = "home1"` and still get the same
>> error. however, i tried using the `-d 99` switch for bconsole and
>> it reveals something helpful:
>
> You need to make sure that this parameter exactly matches what the
> certificate contains. Maybe you didn't enter a fqdn for the CN in the
> cert? If so, the value is ok. Otherwise, you should qualify it.
>
>> i tried running bconsole as root so it could read the private key.
>> is that necessary? if not then can i comment out the `TLS Key`
>> directive from bconsole.conf? either way it's still not working:
>
> Can you run this under strace? It would be useful to see what files
> bconsole is opening and stating. The director side of this could also
> be foiling you here too. Attache strace (or whatever is appropriate
> for your platform) to the running director when you try to attach
> bconsole would be good too.
guys you really need to be more specific with me. do you want me to run
`strace bconsole` or what?
frankly i don't see why bconsole, which was able to be run fine under
normal user privileges, now needs to be run as root to access the
private key.
-----BEGIN PGP SIGNATURE-----
iEYEAREIAAYFAk4sSGEACgkQXhfCJNu98qCVNACgxqmHcbOEVuQGsDwpxlPE2m2q
5+wAoI4elCDUcfJIW1qXnOkrIMZdaGqW
=IKRN
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Magic Quadrant for Content-Aware Data Loss Prevention
Research study explores the data loss prevention market. Includes in-depth
analysis on the changes within the DLP market, and the criteria used to
evaluate the strengths and weaknesses of these DLP solutions.
http://www.accelacomm.com/jaw/sfnl/114/51385063/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
|
|
|